topic Delete ASDM Location Objects in Network Security

Delete ASDM Location Objects

andymelgui — Tue, 12 Mar 2019 03:34:17 GMT

Hello,

I would like to remove an object configured in ASDM by "asdm location 1.1.1.1 255.255.255.255 inside" command. Sadly, this object "1.1.1.1" stays in several NAT rules and access rules in the configuration so I can't remove this object because it is used in other sites of the configuration.

Please do you know if is there some way to remove this object globally ?

Thanks in advance

Andres

Delete ASDM Location Objects

Jouni Forss — Wed, 22 Jan 2014 11:49:29 GMT

Hi,

There is not much information provided about this command in the Command Reference for ASA.

The document does state that one should NOT add or remove this command.

Here is link to the Command Reference section of this command

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/a2.html#wp1664066

Here is a link to the Command Reference regarding a command that could be used to clear "asdm" related configurations.

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/c2.html#wp2390368

As the document indicates, you should be carefull when issuing the commands as they can affect your ability to use ASDM or affect current sessions. It has an option to only clear the "location" related configurations. I am not sure what their effect is.

I am not sure what generates these commands as I don't see them in my own ASA. Then again I very rarely use ASDM to begin with. I do remember to customer managed ASAs (older ones) have plenty of these commands generated.

- Jouni

Delete ASDM Location Objects

andymelgui — Wed, 22 Jan 2014 13:17:16 GMT

Hi Jouni,

thanks for your answer. I have tested "clear configure asdm location" in a testing appliance. When the object "1.1.1.1" stays in some access rule, "clear configure asdm location" command does nothing, all the config remains the same. But if that object "1.1.1.1" is not used anywhere, the "clear configure asdm location" removes ALL the objects configured by "asdm location x.x.x.x y.y.y.y interface" command, so finally it wouldn't be a good practice.

So, by now, clear the object in all nat/access rules manually is the only way that I see

Thanks again

Andres